PI94754:ADMR0024E: User <null> does not have the required role to access 1 document

Download Description

PI94754 resolves the following problem:

ERROR DESCRIPTION:
The following error message was seen in log files:

[2/7/18 13:31:07:470 CET] 000000fd RoleBasedAuth 3
Unauthenticated or missing subject/credentials.
java.lang.Exception:
Unauthenticated or missing subject/credentials.
at
com.ibm.ws.security.role.RoleBasedAuthorizerImpl.getEffectiveCre
dentials(RoleBasedAuthorizerImpl.java:785)
at
com.ibm.ws.security.role.RoleBasedAuthorizerImpl.isGrantedAnyRol
e(RoleBasedAuthorizerImpl.java:981)
at
com.ibm.ws.management.authorizer.AdminAuthorizerImpl.checkAccess
(AdminAuthorizerImpl.java:810)
at
com.ibm.ws.management.authorizer.AdminAuthorizerImpl.checkAccess
(AdminAuthorizerImpl.java:259)
... ...
at
com.ibm.websphere.management.application.EditionHelper.getActive
EditionOnServer(EditionHelper.java:645)
at
com.ibm.ws.policyset.runtime.server.FileLocatorImpl$3.run(FileLo
catorImpl.java:232)
at
com.ibm.ws.policyset.runtime.server.FileLocatorImpl$3.run(FileLo
catorImpl.java:229)
at
java.security.AccessController.doPrivileged(AccessController.jav
a:400)
at
com.ibm.ws.policyset.runtime.server.FileLocatorImpl.getActiveEdi
tion(FileLocatorImpl.java:228)
... ...

LOCAL FIX:
N/A

PROBLEM SUMMARY

USERS AFFECTED:
All users of IBM WebSphere Application
Server for JAX-WS Web services with polciy
attachments.

PROBLEM DESCRIPTION:
ADMR0024E: User <null> does not have
the required role to access 1
document(s).

RECOMMENDATION:
None

The following error message was seen in log files:
[2/7/18 13:31:07:470 CET] 000000fd RoleBasedAuth 3
Unauthenticated or missing subject/credentials.
java.lang.Exception:
Unauthenticated or missing subject/credentials.
at
com.ibm.ws.security.role.RoleBasedAuthorizerImpl.getEffectiveCre
dentials(RoleBasedAuthorizerImpl.java:785)
at
com.ibm.ws.security.role.RoleBasedAuthorizerImpl.isGrantedAnyRol
e(RoleBasedAuthorizerImpl.java:981)
at
com.ibm.ws.management.authorizer.AdminAuthorizerImpl.checkAccess
(AdminAuthorizerImpl.java:810)
at
com.ibm.ws.management.authorizer.AdminAuthorizerImpl.checkAccess
(AdminAuthorizerImpl.java:259)
... ...
at
com.ibm.websphere.management.application.EditionHelper.getActive
EditionOnServer(EditionHelper.java:645)
at
com.ibm.ws.policyset.runtime.server.FileLocatorImpl$3.run(FileLo
catorImpl.java:232)
at
com.ibm.ws.policyset.runtime.server.FileLocatorImpl$3.run(FileLo
catorImpl.java:229)
at
java.security.AccessController.doPrivileged(AccessController.jav
a:400)
at
com.ibm.ws.policyset.runtime.server.FileLocatorImpl.getActiveEdi
tion(FileLocatorImpl.java:228)
... ...
When security is enabled, the error message may look like the
following:
ADMR0024E: User defaultWIMFileBasedRealm/user1_5 does not have
the required role to access 1 document(s).

PROBLEM CONCLUSION:
The problem has been resolved by adding proper access control
code.

The fix for this APAR is currently targeted for inclusion in
fix pack 8.5.5.14. Please refer to the Recommended Updates
page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980